Need for controlled access – strict controls are needed.  Special permission rights must be given to individual e.g. view, modify, store.  When people get transferred to other departments or leave, access must be changed accordingly.

Maintaining confidentiality – confidentiality must be adhered to and staff should be made aware of the confidential nature of their work and they must be aware that drastic measures will be taken if not adhered to.